6.1

CVE-2023-22971

Exploit
Cross Site Scripting (XSS) vulnerability in Hughes Network Systems Router Terminal for HX200 v8.3.1.14, HX90 v6.11.0.5, HX50L v6.10.0.18, HN9460 v8.2.0.48, and HN7000S v6.9.0.37, allows unauthenticated attackers to misuse frames, include JS/HTML code and steal sensitive information from legitimate users of the application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hughes ≫ Hx200 Firmware Version 8.3.1.14
   Hughes ≫ Hx200 Version -
Hughes ≫ Hx90 Firmware Version 6.11.0.5
   Hughes ≫ Hx90 Version -
Hughes ≫ Hx50l Firmware Version 6.10.0.18
   Hughes ≫ Hx50l Version -
Hughes ≫ Hn9460 Firmware Version 8.2.0.48
   Hughes ≫ Hn9460 Version -
Hughes ≫ Hn7000s Firmware Version 6.9.0.37
   Hughes ≫ Hn7000s Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.68% 0.473
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA-ADP 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://www.hughes.com
Vendor Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5743.php
Third Party Advisory
Exploit